Privacy Policy

1. Introduction

Waris Mulia ("the Firm", "we", "us", "our") is committed to protecting the personal data of those who use our services or visit our website. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").

By engaging our services or submitting information through our website at warismul, you agree to the practices described in this policy. Questions should be directed to: privacy@warismul.

2. Data We Collect

We collect personal data in the following categories:

• Contact information: Name, email address, telephone number, and postal address when submitted through our contact form or during consultation.
• Matter-related information: Asset details, beneficiary information, and other personal data necessary to provide legal services after engagement begins.
• Website usage data: IP address, browser type, pages visited, and time spent on pages, collected through analytics tools where cookie consent is given.
• Communications: Emails, messages, and records of telephone conversations where applicable.

We collect only data that is necessary for the purposes described below. We do not request sensitive personal data (such as financial account numbers or identification document details) through the website contact form.

3. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given clear consent, such as completing the contact form or accepting analytics cookies.
• Contract performance: To provide legal services as engaged by you.
• Legal obligation: Where we are required to process data to comply with Malaysian law, including anti-money laundering obligations and court requirements.
• Legitimate interests: To manage our practice, respond to enquiries, and improve our services.

4. How We Use Your Data

• To respond to enquiries submitted through our contact form.
• To provide legal services as instructed by you or the engaging party.
• To fulfil professional and regulatory obligations as members of the Malaysian Bar.
• To maintain records as required by Malaysian law (including the Legal Profession Act 1976 and the Limitation Act 1953).
• To improve our website and services, where analytics consent has been given.
• We do not use personal data for direct marketing without explicit consent.

5. Data Sharing

We do not sell or lease personal data to third parties. Data may be shared in the following circumstances:

• Courts and tribunals: Where required to conduct or respond to legal proceedings.
• Government authorities: Including the Land Registry, financial institutions, and the National Registration Department, where required for estate administration.
• Correspondent solicitors: Where a matter requires action in another state, with your knowledge and consent.
• Service providers: Including our website hosting provider and analytics service, under data processing agreements that bind them to the same standards.

6. Data Retention

We retain personal data for the following periods:

• Contact form enquiries that do not result in an engagement: 12 months.
• Client files (engaged matters): 7 years from the date of closure of the matter, in accordance with professional conduct requirements.
• Will originals: Retained indefinitely or returned to client upon request.
• Analytics data: As set by the analytics provider's retention policy; typically 14 months.

7. Data Security

We take reasonable technical and organisational measures to protect personal data, including:

• Encrypted email communications for sensitive client information.
• Access controls restricting file access to the handling lawyer and authorised support staff.
• Physical security for paper files stored on our premises.
• Website hosted on servers with industry-standard security protocols.

In the event of a data breach that is likely to result in significant harm to affected persons, we will notify those concerned and, where required, the relevant authority, within a reasonable period.

8. Cookies

Our website uses cookies. For a detailed explanation of the types of cookies we use and how to manage them, please refer to our Cookie Policy.

9. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent for direct marketing communications.
• Inquire about the purposes for which your data is being processed.

To exercise any of these rights, please contact us at privacy@warismul. We will respond within a reasonable period and in any event within 21 days.

Note that certain rights do not apply to data processed under a legal obligation or for the conduct of legal proceedings.

10. Solicitor-Client Privilege

Communications made in the context of a solicitor-client relationship are protected by legal professional privilege under Malaysian law. This protection operates independently of this Privacy Policy and cannot be waived by reference to this document.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal data.

12. Minors

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 through our website.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised "Last Updated" date. We recommend reviewing this policy periodically. Material changes affecting how we process data will be communicated directly to active clients.

14. Contact

Data controller: Waris Mulia, Lebuh Light, 10200 George Town, Penang, Malaysia.

Email: privacy@warismul
Telephone: +60 4-263 4718